VULNERABILITY INTELLIGENCE
CVE-2021-37086
CVSS score8.6 HIGH
EPSS probability0.66%
CISA KEVNot currently listed
Published2021-12-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read synchronization files of other applications across the UID sandbox.
Weakness classification
- nvd@nist.gov: CWE-281
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory